{"api_version":"1","generated_at":"2026-09-05T09:05:51+00:00","cve":"CVE-2020-11113","urls":{"html":"https://cve.report/CVE-2020-11113","api":"https://cve.report/api/cve/CVE-2020-11113.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-11113","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11113"},"summary":{"title":"CVE-2020-11113","description":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).","state":"PUBLISHED","assigner":"mitre","published_at":"2020-03-31 05:15:13","updated_at":"2026-08-25 16:28:27"},"problem_types":["CWE-502","n/a","CWE-502 CWE-502 Deserialization of Untrusted Data"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"8.8","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"ADP","type":"DECLARED","score":"8.8","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"8.8","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","name":"https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[SECURITY] [DLA 2179-1] jackson-databind security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","name":"https://www.oracle.com/security-alerts/cpuoct2021.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - October 2021","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/FasterXML/jackson-databind/issues/2670","name":"https://github.com/FasterXML/jackson-databind/issues/2670","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Block one more gadget type (openjpa, CVE-2020-11113) · Issue #2670 · FasterXML/jackson-databind · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","name":"https://www.oracle.com/security-alerts/cpujan2021.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - January 2021","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","name":"https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"On Jackson CVEs: Don’t Panic — Here is what you need to know | by @cowtowncoder | Medium","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","name":"https://www.oracle.com/security-alerts/cpuoct2020.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - October 2020","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://security.netapp.com/advisory/ntap-20200403-0002/","name":"https://security.netapp.com/advisory/ntap-20200403-0002/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"April 2020 FasterXML jackson-databind Vulnerabilities in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","name":"https://www.oracle.com/security-alerts/cpujul2020.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"Oracle Critical Patch Update Advisory - July 2020","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","name":"MISC:https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","refsource":"MITRE","tags":[],"title":"On Jackson CVEs: Don’t Panic — Here is what you need to know | by @cowtowncoder | Medium","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11113","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11113","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]},{"source":"ADP","vendor":"fasterxml","product":"jackson-databind","version":"affected 2.9.10.4 custom","platforms":[]},{"source":"ADP","vendor":"debian","product":"debian_linux","version":"affected 8.0","platforms":[]},{"source":"ADP","vendor":"netapp","product":"steelstore_cloud_integrated_storage","version":"affected *","platforms":[]},{"source":"ADP","vendor":"oracle","product":"agile_plm","version":"affected 9.3.6","platforms":[]},{"source":"ADP","vendor":"oracle","product":"autovue_for_agile_product_lifecycle_management","version":"affected 21.0.2","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 18.1 18.3 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 19.1 19.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 20.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 2.4.0 2.9.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 18.1 18.3 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 19.1 19.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 20.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 2.4.0 2.9.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 18.1 18.3 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 19.1 19.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 20.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 2.4.0 2.9.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 18.1 18.3 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 19.1 19.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 20.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"banking_digital_experience","version":"affected 2.4.0 2.9.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_calendar_server","version":"affected 8.0.0.4.0 8.0.0.5.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_diameter_signaling_router","version":"affected 8.0.0 8.2.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_element_manager","version":"affected 8.2.0 8.2.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_evolved_communications_application_server","version":"affected 7.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_instant_messaging_server","version":"affected 10.0.1.4.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_network_charging_and_control","version":"affected 6.0.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_network_charging_and_control","version":"affected 12.0.0 12.0.3 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"communications_session_route_manager","version":"affected 8.2.0 8.2.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"enterprise_manager_base_platform","version":"affected 13.3.0.0 13.4.0.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_analytical_applications_infrastructure","version":"affected 8.0.6 8.1.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.0.6","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.0.7","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.1.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.0.6","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.0.7","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.1.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.0.6","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.0.7","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_institutional_performance_analytics","version":"affected 8.1.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_price_creation_and_discovery","version":"affected 8.0.6 8.0.7 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"financial_services_retail_customer_analytics","version":"affected 8.0.6","platforms":[]},{"source":"ADP","vendor":"oracle","product":"global_lifecycle_management_opatch","version":"affected 12.2.0.1.20 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"insurance_policy_administration_j2ee","version":"affected 11.0.2.25 11.1.0.15 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"jd_edwards_enterpriseone_orchestrator","version":"affected 9.2.4.2 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.2","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 17.7 17.12 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 18.8","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 19.12","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.2","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 17.7 17.12 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 18.8","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 19.12","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.2","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 17.7 17.12 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 18.8","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 19.12","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.2","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 17.7 17.12 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 18.8","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 19.12","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 16.2","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 17.7 17.12 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 18.8","platforms":[]},{"source":"ADP","vendor":"oracle","product":"primavera_unifier","version":"affected 19.12","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_merchandising_system","version":"affected 15.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_sales_audit","version":"affected 14.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 14.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 15.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 16.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 14.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 15.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 16.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 14.1","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 15.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_service_backbone","version":"affected 16.0","platforms":[]},{"source":"ADP","vendor":"oracle","product":"retail_xstore_point_of_service","version":"affected 15.0 19.0 custom","platforms":[]},{"source":"ADP","vendor":"oracle","product":"weblogic_server","version":"affected 12.2.1.3.0 12.2.1.4.0 custom","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fasterxml","cpe5":"jackson-databind","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"netapp","cpe5":"steelstore_cloud_integrated_storage","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"agile_product_lifecycle_management","cpe6":"9.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"autovue_for_agile_product_lifecycle_management","cpe6":"21.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"banking_digital_experience","cpe6":"18.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"banking_digital_experience","cpe6":"18.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"banking_digital_experience","cpe6":"18.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"banking_digital_experience","cpe6":"19.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"banking_digital_experience","cpe6":"19.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"banking_digital_experience","cpe6":"20.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"2.9.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"banking_platform","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_calendar_server","cpe6":"8.0.0.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_contacts_server","cpe6":"8.0.0.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"8.2.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_diameter_signaling_router","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"8.2.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_element_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_evolved_communications_application_server","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_instant_messaging_server","cpe6":"10.0.1.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_network_charging_and_control","cpe6":"6.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"12.0.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_network_charging_and_control","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"8.2.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_session_report_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"8.2.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"communications_session_route_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"enterprise_manager_base_platform","cpe6":"13.3.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"enterprise_manager_base_platform","cpe6":"13.4.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"8.1.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"financial_services_analytical_applications_infrastructure","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"financial_services_institutional_performance_analytics","cpe6":"8.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"financial_services_institutional_performance_analytics","cpe6":"8.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"financial_services_institutional_performance_analytics","cpe6":"8.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"financial_services_price_creation_and_discovery","cpe6":"8.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"financial_services_price_creation_and_discovery","cpe6":"8.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"financial_services_retail_customer_analytics","cpe6":"8.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"global_lifecycle_management_opatch","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"insurance_policy_administration_j2ee","cpe6":"11.0.2.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"insurance_policy_administration_j2ee","cpe6":"11.1.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jd_edwards_enterpriseone_orchestrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jd_edwards_enterpriseone_tools","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"primavera_unifier","cpe6":"16.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"primavera_unifier","cpe6":"16.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"primavera_unifier","cpe6":"18.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"primavera_unifier","cpe6":"19.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"17.12","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"primavera_unifier","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_merchandising_system","cpe6":"15.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_sales_audit","cpe6":"14.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_service_backbone","cpe6":"14.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_service_backbone","cpe6":"15.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_service_backbone","cpe6":"16.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_xstore_point_of_service","cpe6":"15.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_xstore_point_of_service","cpe6":"16.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_xstore_point_of_service","cpe6":"17.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_xstore_point_of_service","cpe6":"18.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"retail_xstore_point_of_service","cpe6":"19.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"webcenter_portal","cpe6":"12.2.1.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"webcenter_portal","cpe6":"12.2.1.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"weblogic_server","cpe6":"12.2.1.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"11113","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"weblogic_server","cpe6":"12.2.1.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2020","cve_id":"11113","cve":"CVE-2020-11113","epss":"0.062780000","percentile":"0.930390000","score_date":"2026-08-25","updated_at":"2026-08-26 00:12:15"},"legacy_qids":[{"cve":"CVE-2020-11113","qid":"375626","title":"IBM Cognos Analytics Multiple Vulnerabilities (6451705)"},{"cve":"CVE-2020-11113","qid":"980311","title":"Java (maven) Security Update for com.fasterxml.jackson.core:jackson-databind (GHSA-9vvp-fxw6-jcxr)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"jackson-databind","vendor":"fasterxml","versions":[{"lessThan":"2.9.10.4","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"debian_linux","vendor":"debian","versions":[{"status":"affected","version":"8.0"}]},{"cpes":["cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"steelstore_cloud_integrated_storage","vendor":"netapp","versions":[{"status":"affected","version":"*"}]},{"cpes":["cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"agile_plm","vendor":"oracle","versions":[{"status":"affected","version":"9.3.6"}]},{"cpes":["cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"autovue_for_agile_product_lifecycle_management","vendor":"oracle","versions":[{"status":"affected","version":"21.0.2"}]},{"cpes":["cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"banking_digital_experience","vendor":"oracle","versions":[{"lessThanOrEqual":"18.3","status":"affected","version":"18.1","versionType":"custom"},{"lessThanOrEqual":"19.2","status":"affected","version":"19.1","versionType":"custom"},{"status":"affected","version":"20.1"},{"lessThanOrEqual":"2.9.0","status":"affected","version":"2.4.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"banking_digital_experience","vendor":"oracle","versions":[{"lessThanOrEqual":"18.3","status":"affected","version":"18.1","versionType":"custom"},{"lessThanOrEqual":"19.2","status":"affected","version":"19.1","versionType":"custom"},{"status":"affected","version":"20.1"},{"lessThanOrEqual":"2.9.0","status":"affected","version":"2.4.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"banking_digital_experience","vendor":"oracle","versions":[{"lessThanOrEqual":"18.3","status":"affected","version":"18.1","versionType":"custom"},{"lessThanOrEqual":"19.2","status":"affected","version":"19.1","versionType":"custom"},{"status":"affected","version":"20.1"},{"lessThanOrEqual":"2.9.0","status":"affected","version":"2.4.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"banking_digital_experience","vendor":"oracle","versions":[{"lessThanOrEqual":"18.3","status":"affected","version":"18.1","versionType":"custom"},{"lessThanOrEqual":"19.2","status":"affected","version":"19.1","versionType":"custom"},{"status":"affected","version":"20.1"},{"lessThanOrEqual":"2.9.0","status":"affected","version":"2.4.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:communications_calendar_server:8.0.0.4.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_calendar_server","vendor":"oracle","versions":[{"lessThanOrEqual":"8.0.0.5.0","status":"affected","version":"8.0.0.4.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:communications_diameter_signaling_router:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_diameter_signaling_router","vendor":"oracle","versions":[{"lessThanOrEqual":"8.2.2","status":"affected","version":"8.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_element_manager","vendor":"oracle","versions":[{"lessThanOrEqual":"8.2.2","status":"affected","version":"8.2.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_evolved_communications_application_server","vendor":"oracle","versions":[{"status":"affected","version":"7.1"}]},{"cpes":["cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_instant_messaging_server","vendor":"oracle","versions":[{"status":"affected","version":"10.0.1.4.0"}]},{"cpes":["cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_network_charging_and_control","vendor":"oracle","versions":[{"status":"affected","version":"6.0.1"}]},{"cpes":["cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_network_charging_and_control","vendor":"oracle","versions":[{"lessThanOrEqual":"12.0.3","status":"affected","version":"12.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:communications_session_route_manager:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"communications_session_route_manager","vendor":"oracle","versions":[{"lessThanOrEqual":"8.2.2","status":"affected","version":"8.2.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"enterprise_manager_base_platform","vendor":"oracle","versions":[{"lessThanOrEqual":"13.4.0.0","status":"affected","version":"13.3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"financial_services_analytical_applications_infrastructure","vendor":"oracle","versions":[{"lessThanOrEqual":"8.1.0","status":"affected","version":"8.0.6","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"financial_services_institutional_performance_analytics","vendor":"oracle","versions":[{"status":"affected","version":"8.0.6"},{"status":"affected","version":"8.0.7"},{"status":"affected","version":"8.1.0"}]},{"cpes":["cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"financial_services_institutional_performance_analytics","vendor":"oracle","versions":[{"status":"affected","version":"8.0.6"},{"status":"affected","version":"8.0.7"},{"status":"affected","version":"8.1.0"}]},{"cpes":["cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"financial_services_institutional_performance_analytics","vendor":"oracle","versions":[{"status":"affected","version":"8.0.6"},{"status":"affected","version":"8.0.7"},{"status":"affected","version":"8.1.0"}]},{"cpes":["cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"financial_services_price_creation_and_discovery","vendor":"oracle","versions":[{"lessThanOrEqual":"8.0.7","status":"affected","version":"8.0.6","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:financial_services_retail_customer_analytics:8.0.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"financial_services_retail_customer_analytics","vendor":"oracle","versions":[{"status":"affected","version":"8.0.6"}]},{"cpes":["cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"global_lifecycle_management_opatch","vendor":"oracle","versions":[{"lessThanOrEqual":"12.2.0.1.20","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:insurance_policy_administration_j2ee:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"insurance_policy_administration_j2ee","vendor":"oracle","versions":[{"lessThan":"11.1.0.15","status":"affected","version":"11.0.2.25","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"jd_edwards_enterpriseone_orchestrator","vendor":"oracle","versions":[{"lessThanOrEqual":"9.2.4.2","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"primavera_unifier","vendor":"oracle","versions":[{"status":"affected","version":"16.1"},{"status":"affected","version":"16.2"},{"lessThanOrEqual":"17.12","status":"affected","version":"17.7","versionType":"custom"},{"status":"affected","version":"18.8"},{"status":"affected","version":"19.12"}]},{"cpes":["cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"primavera_unifier","vendor":"oracle","versions":[{"status":"affected","version":"16.1"},{"status":"affected","version":"16.2"},{"lessThanOrEqual":"17.12","status":"affected","version":"17.7","versionType":"custom"},{"status":"affected","version":"18.8"},{"status":"affected","version":"19.12"}]},{"cpes":["cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"primavera_unifier","vendor":"oracle","versions":[{"status":"affected","version":"16.1"},{"status":"affected","version":"16.2"},{"lessThanOrEqual":"17.12","status":"affected","version":"17.7","versionType":"custom"},{"status":"affected","version":"18.8"},{"status":"affected","version":"19.12"}]},{"cpes":["cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"primavera_unifier","vendor":"oracle","versions":[{"status":"affected","version":"16.1"},{"status":"affected","version":"16.2"},{"lessThanOrEqual":"17.12","status":"affected","version":"17.7","versionType":"custom"},{"status":"affected","version":"18.8"},{"status":"affected","version":"19.12"}]},{"cpes":["cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"primavera_unifier","vendor":"oracle","versions":[{"status":"affected","version":"16.1"},{"status":"affected","version":"16.2"},{"lessThanOrEqual":"17.12","status":"affected","version":"17.7","versionType":"custom"},{"status":"affected","version":"18.8"},{"status":"affected","version":"19.12"}]},{"cpes":["cpe:2.3:a:oracle:retail_merchandising_system:15.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"retail_merchandising_system","vendor":"oracle","versions":[{"status":"affected","version":"15.0"}]},{"cpes":["cpe:2.3:a:oracle:retail_sales_audit:14.1:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"retail_sales_audit","vendor":"oracle","versions":[{"status":"affected","version":"14.1"}]},{"cpes":["cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"retail_service_backbone","vendor":"oracle","versions":[{"status":"affected","version":"14.1"},{"status":"affected","version":"15.0"},{"status":"affected","version":"16.0"}]},{"cpes":["cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"retail_service_backbone","vendor":"oracle","versions":[{"status":"affected","version":"14.1"},{"status":"affected","version":"15.0"},{"status":"affected","version":"16.0"}]},{"cpes":["cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"retail_service_backbone","vendor":"oracle","versions":[{"status":"affected","version":"14.1"},{"status":"affected","version":"15.0"},{"status":"affected","version":"16.0"}]},{"cpes":["cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"retail_xstore_point_of_service","vendor":"oracle","versions":[{"lessThanOrEqual":"19.0","status":"affected","version":"15.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"weblogic_server","vendor":"oracle","versions":[{"lessThanOrEqual":"12.2.1.4.0","status":"affected","version":"12.2.1.3.0","versionType":"custom"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2020-11113","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-05-25T04:00:43.551763Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-502","description":"CWE-502 Deserialization of Untrusted Data","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-08-27T20:32:51.363Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2024-08-04T11:21:14.618Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"[debian-lts-announce] 20200417 [SECURITY] [DLA 2179-1] jackson-databind security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20200403-0002/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/FasterXML/jackson-databind/issues/2670"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-10-20T10:38:50.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"[debian-lts-announce] 20200417 [SECURITY] [DLA 2179-1] jackson-databind security update","tags":["mailing-list","x_refsource_MLIST"],"url":"https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html"},{"tags":["x_refsource_MISC"],"url":"https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://security.netapp.com/advisory/ntap-20200403-0002/"},{"tags":["x_refsource_MISC"],"url":"https://github.com/FasterXML/jackson-databind/issues/2670"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2020-11113","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"[debian-lts-announce] 20200417 [SECURITY] [DLA 2179-1] jackson-databind security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html"},{"name":"https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","refsource":"MISC","url":"https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"},{"name":"https://www.oracle.com/security-alerts/cpujul2020.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"name":"https://security.netapp.com/advisory/ntap-20200403-0002/","refsource":"CONFIRM","url":"https://security.netapp.com/advisory/ntap-20200403-0002/"},{"name":"https://github.com/FasterXML/jackson-databind/issues/2670","refsource":"MISC","url":"https://github.com/FasterXML/jackson-databind/issues/2670"},{"name":"https://www.oracle.com/security-alerts/cpuoct2020.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"name":"https://www.oracle.com/security-alerts/cpujan2021.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"name":"https://www.oracle.com/security-alerts/cpuoct2021.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2020-11113","datePublished":"2020-03-31T04:37:27.000Z","dateReserved":"2020-03-31T00:00:00.000Z","dateUpdated":"2025-08-27T20:32:51.363Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2020-03-31 05:15:13","lastModifiedDate":"2026-08-25 16:28:27","problem_types":["CWE-502","n/a","CWE-502 CWE-502 Deserialization of Untrusted Data"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-25T04:00:43.551763Z","id":"CVE-2020-11113","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.9.10.4","matchCriteriaId":"C2BF4BC7-EDDB-4187-B386-12413253D234"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*","matchCriteriaId":"E94F7F59-1785-493F-91A7-5F5EA5E87E4D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*","matchCriteriaId":"4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97994257-C9A4-4491-B362-E8B25B7187AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:*","matchCriteriaId":"BBE7BF09-B89C-4590-821E-6C0587E096B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:*","matchCriteriaId":"ADAE8A71-0BCD-42D5-B38C-9B2A27CC1E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:*","matchCriteriaId":"E7231D2D-4092-44F3-B60A-D7C9ED78AFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*","matchCriteriaId":"F7BDFC10-45A0-46D8-AB92-4A5E2C1C76ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*","matchCriteriaId":"18127694-109C-4E7E-AE79-0BA351849291"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*","matchCriteriaId":"33F68878-BC19-4DB8-8A72-BD9FE3D0ACEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndIncluding":"2.9.0","matchCriteriaId":"5343F8F8-E8B4-49E9-A304-9C8A608B8027"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_calendar_server:8.0.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"46059231-E7F6-4402-8119-1C7FE4ABEA96"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_contacts_server:8.0.0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D01A0BBC-DA0E-4AFE-83BF-4F3BA01653EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.2.2","matchCriteriaId":"526E2FE5-263F-416F-8628-6CD40B865780"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndIncluding":"8.2.2","matchCriteriaId":"B51F78F4-8D7E-48C2-86D1-D53A6EB348A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"987811D5-DA5E-493D-8709-F9231A84E5F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0DB23B9A-571E-4B77-B432-23F3DC9B67D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0.0","versionEndIncluding":"12.0.3","matchCriteriaId":"2AB443D1-D8E0-4253-9E1C-B62AEBBE582A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ECC00750-1DBF-401F-886E-E0E65A277409"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndIncluding":"8.2.2","matchCriteriaId":"3E5416A1-EE58-415D-9645-B6A875EBAED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndIncluding":"8.2.2","matchCriteriaId":"11B0C37E-D7C7-45F2-A8D8-5A3B1B191430"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7582B307-3899-4BBB-B868-BC912A4D0109"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.6","versionEndIncluding":"8.1.0","matchCriteriaId":"021014B2-DC51-481C-BCFE-5857EFBDEDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"37C8EE84-A840-4132-B331-C7D450B1FBBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1D8436A2-9CA3-4C91-B632-9B03368ABC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A00142E6-EEB3-44BD-AB0D-0E5C5640557F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4A01F8ED-64DA-43BC-9C02-488010BCD0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"75638A6A-88B2-4BC7-84EA-1CF5FC30D555"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:financial_services_retail_customer_analytics:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1FBF422E-3F67-4599-A7C1-0E2E4224553A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*","versionEndExcluding":"12.2.0.1.20","matchCriteriaId":"A8200D5C-D3C7-4936-84A7-37864DEEC62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:insurance_policy_administration_j2ee:11.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"72F28CE3-F835-4458-8D70-CBE9FC2F7E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:insurance_policy_administration_j2ee:11.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"9F058FDA-04BC-4F32-830D-206983770692"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.4.2","matchCriteriaId":"6E46AE88-E9F8-41CB-B15F-12F5127A1E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.4.2","matchCriteriaId":"A3D635AE-5E4A-47FB-9FCA-D82D52A61367"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*","versionStartIncluding":"17.7","versionEndIncluding":"17.12","matchCriteriaId":"08FA59A8-6A62-4B33-8952-D6E658F8DAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*","matchCriteriaId":"D55A54FD-7DD1-49CD-BE81-0BE73990943C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*","matchCriteriaId":"82EB08C0-2D46-4635-88DF-E54F6452D3A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*","matchCriteriaId":"202AD518-2E9B-4062-B063-9858AE1F9CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*","matchCriteriaId":"10864586-270E-4ACF-BDCC-ECFCD299305F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_merchandising_system:15.0:*:*:*:*:*:*:*","matchCriteriaId":"792DF04A-2D1B-40B5-B960-3E7152732EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_sales_audit:14.1:*:*:*:*:*:*:*","matchCriteriaId":"7DA6E92C-AC3B-40CF-96AE-22CD8769886F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_service_backbone:14.1:*:*:*:*:*:*:*","matchCriteriaId":"378A6656-252B-4929-83EA-BC107FDFD357"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_service_backbone:15.0:*:*:*:*:*:*:*","matchCriteriaId":"363395FA-C296-4B2B-9D6F-BCB8DBE6FACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_service_backbone:16.0:*:*:*:*:*:*:*","matchCriteriaId":"F62A2144-5EF8-4319-B8C2-D7975F51E5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*","matchCriteriaId":"11DA6839-849D-4CEF-85F3-38FE75E07183"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*","matchCriteriaId":"BCE78490-A4BE-40BD-8C72-0A4526BBD4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*","matchCriteriaId":"55AE3629-4A66-49E4-A33D-6D81CC94962F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*","matchCriteriaId":"4CB39A1A-AD29-45DD-9EB5-5E2053A01B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:*","matchCriteriaId":"27C26705-6D1F-4D5E-B64D-B479108154FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D6A4F71A-4269-40FC-8F61-1D1301F2B728"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"5A502118-5B2B-47AE-82EC-1999BD841103"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F14A818F-AA16-4438-A3E4-E64C9287AC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"11113","Ordinal":"1","Title":"CVE-2020-11113","CVE":"CVE-2020-11113","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"11113","Ordinal":"1","NoteData":"FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).","Type":"Description","Title":"CVE-2020-11113"},{"CveYear":"2020","CveId":"11113","Ordinal":"2","NoteData":"2020-03-31","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"11113","Ordinal":"3","NoteData":"2021-10-20","Type":"Other","Title":"Modified"}]}}}